THREAT OPS › Threat News › Fake Microsoft security scans trick victims into uninstalling their antivirus
Fake Microsoft security scans trick victims into uninstalling their antivirus
<p class="wp-block-paragraph">A wave of websites is offering to check whether your antivirus is working. They call themselves <strong>SysScan</strong>, carry Microsoft branding, and all reach the same conclusion: Your computer has serious problems, and the cause is the antivirus software you installed.</p>
<p class="wp-block-paragraph">Windows, they claim, no longer supports third-party antivir
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- 206cb12516cf7911541848b4cf513a38md5
- http://ic3.gov/url
- https://files.slack.com/files-pri/T9182B16E-F0BQW0XA19D/download/fake-microsoft-sysscan-refund-scam.md?origin_team=T9182B16Eurl
- https://malwarebytes.slack.com/files/U09FV9L8JSY/F0BQW0XA19D/fake-microsoft-sysscan-refund-scam.md?origin_team=T9182B16E&origin_channel=C09JKS8HM4Hurl
- 157.230.180.90ipv4
- detectsysscanner.comdomain
- detectsysscanner.in.netdomain
- detsysscanner.comdomain
- techsysscanner.comdomain
- tlcscanner.comdomain